Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json)
Hash identifier: pezW1e0Kak0CErkfjA3pmUOH0WdcNWrBKtXDAwfRZq0=
Subject key identifier: 17:1D:A4:4C:0D:98:8C:C7:84:ED:C9:56:9A:E9:1D:91:42:77:1E:AE
Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
Manifest number: D3
Signing time: Fri 31 Jan 2025 04:48:01 +0000
Manifest this update: Fri 31 Jan 2025 04:48:00 +0000
Manifest next update: Fri 07 Feb 2025 04:48:00 +0000
Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: vFQAq7oEyaGVNwcHtt8OUxXfbx0XCfKS6Z+O5FR50mY=)
2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: 3JCYdG127llvDq2ItCHcIF18EbtwG2SS2OGY+RRrxS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Validity
Not Before: Jan 31 04:48:00 2025 GMT
Not After : Feb 7 04:48:00 2025 GMT
Subject: CN=679c5601-7360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:24:e2:2f:c2:b4:7f:ab:d0:98:54:97:f5:f5:
fd:76:49:2a:0f:29:27:a2:77:bd:e1:0c:43:b2:5e:
78:5c:24:e6:30:12:8c:59:46:9f:c8:1e:49:ee:d7:
7b:53:5e:d9:fb:b4:98:93:3a:a3:9b:d2:e5:2e:3f:
63:1e:13:2e:29:66:81:b4:7e:b0:37:53:5d:4e:dd:
c8:0e:be:c1:3d:5a:1f:70:a2:6d:d3:65:b2:e3:6d:
94:4c:a2:2a:2a:62:0d:64:fc:bc:cb:a7:1f:90:85:
1c:87:2d:b8:9f:49:20:11:24:fb:d6:82:d2:ca:b2:
d2:c5:a5:a0:8f:22:04:be:81:44:71:37:4f:48:3a:
e9:92:f5:25:60:49:d0:1d:bc:ce:97:e7:46:b2:3e:
ac:12:5e:84:ec:82:55:85:05:3d:ef:c8:d6:38:ce:
e6:65:de:15:d8:07:fe:31:3f:7e:ac:2f:83:77:8b:
41:50:40:02:5d:1b:64:ef:68:b5:70:a2:db:f6:a3:
df:81:2a:b5:82:15:3e:df:af:57:8c:a1:ff:7c:60:
73:33:bd:ed:27:b7:73:2e:c6:ab:e4:fd:35:76:65:
0e:2d:0c:9d:3e:df:c7:da:e0:48:9c:7f:77:8d:a0:
df:ff:14:3f:78:0a:e6:76:58:9d:3e:c0:b5:bb:8e:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1D:A4:4C:0D:98:8C:C7:84:ED:C9:56:9A:E9:1D:91:42:77:1E:AE
X509v3 Authority Key Identifier:
keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:1a:e6:c3:7f:86:ec:9c:da:37:55:f6:80:76:6d:08:d6:f3:
51:4f:77:22:ed:24:b8:ff:a0:4d:81:9f:e0:9e:ed:5d:8b:76:
7c:5f:51:3f:4f:ff:4a:c5:e5:7f:cb:2a:60:d5:51:2d:a8:6a:
bc:3f:49:65:35:3e:d3:ee:f1:d2:47:ae:71:9f:b3:0c:4f:94:
84:e3:e1:6a:cf:f2:5b:a5:69:d1:fc:d9:db:51:7b:5b:2b:43:
ba:b5:71:33:99:69:51:c3:ff:83:8c:55:e7:2d:88:7a:68:b8:
13:73:db:50:9a:4a:1b:40:5e:70:53:a3:82:fa:6d:f5:f3:29:
0a:11:b1:ae:7c:e6:40:df:82:86:d7:63:5f:d2:5e:9e:84:e1:
02:5a:f9:13:e7:ee:66:d3:53:3a:b5:d2:62:48:bb:ac:7c:45:
f8:40:be:62:b2:6c:52:ba:db:de:0d:e4:bf:d2:bc:de:e8:49:
4f:6e:85:c6:f8:cf:93:14:54:e9:73:f5:53:a2:87:db:9e:f1:
19:f5:c5:99:4d:c1:8f:dd:4f:03:9a:67:1f:3d:1a:77:42:6e:
67:42:61:d1:5d:a0:fd:b7:b0:25:c2:ab:10:a5:3f:18:62:fa:
df:c7:65:71:c2:a8:28:65:b0:71:f1:d1:e2:e6:84:0b:d7:da:
85:59:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:06 2025 by rpki-client